Software Validation - Contract manufacturer of Components (PCBA's)

D
#1
We are a contract manufacturer of components (PCBA's). We do not manufacture finished medical devices. We are not registered with the FDA. We receive prints from our customers that detail the product and its requirements they are purchasing from us.

We take design and development as an exclusion. Sterilization and UDI are non-applicable items and we do not assemble PCBA's that are used in implantable devices.

Section 7.5.6 states that "The organization shall validate any processes for production and service provision where the resulting output cannot be or is not verified by subsequent monitoring or measurement and as a consequence, deficiencies become apparent only after the product is in use or the service has been delivered". "The organization shall document procedures for the validation of the application of computer software used in production and service provision".

As a contract manufacture, assembling printed circuit boards with material purchased off the shelf, where the outputs are fully verified through our approval process, we do not assemble or sell the finished medical device (sell completed PCBA's to medical device companies that install our PCBA's into the finished medical device), are we required by the ISO 13485:2016 standard to validate computer software such as Microsoft Office, CCAM and software that came preinstalled in equipment used for assembling PCBA's?

We do not write macros or modify software used in the computers/production equipment and the software is controlled by the manufacturer. The software loaded into the equipment used in production is preloaded into the machine by the manufacturer, created specifically for that piece of equipment and controlled by the manufacturer (cannot be modified).

To what extent would we need to validate software to satisfy the ISO 13485:2016 seeing exceptions cannot be taken? Again, our outputs are fully verified through our approval process (visual inspection, AOI inspection, etc.).

Any input regarding computer software validation would be appreciated.
 
Elsmar Forum Sponsor
#2
Hi,

Based on the small information you gave you need to do a risk analysis of each software you are using in the process. Probably Office software do not have the same impact in the process as the software you are directly using in production to design and manufacture parts. For the software you identify they are critical, you probably need to do a software validation. That not necessary means that you need to validate all the software. You only need to validate functionalities you are using in the process. An other important aspect, you need to confirm that you are using the software in it intended use. If not it can be more complex.
 
D
#3
Hi,

Based on the small information you gave you need to do a risk analysis of each software you are using in the process. Probably Office software do not have the same impact in the process as the software you are directly using in production to design and manufacture parts. For the software you identify they are critical, you probably need to do a software validation. That not necessary means that you need to validate all the software. You only need to validate functionalities you are using in the process. An other important aspect, you need to confirm that you are using the software in it intended use. If not it can be more complex.
We did make a list and perform a risk analysis which shows a low risk. Most of the software that was loaded on the automated equipment does not receive any software updates, we use it for its intended purpose. We did perform equipment validation on each piece of automated equipment used in production (IQ/OQ/PQ) which shows the equipment is functioning the way it should function or as expected. Can the validation reports completed for equipment validation be used to cover software validation? For example, a Heller Reflow Oven we input oven profiles (use the software that is loaded into the machine by the manufacture, do not modify or update that software which is controlled/installed by the manufacturer) and save the settings for future use. We used recommended settings by the material manufacture when inputting these profiles.
 
#4
Hi,

I think if most of your software are loaded on your equipment I think most of the validation maybe done by the way of your IQ/OQ/PQ process. It will certainly cleaver to keep track of all changes done on any software. An other thing is you final quality control that can address some part of risk mitigation. Some thing is important you need to have a minimum to say about that and demonstrate you did a good analysis.

I hope it will help.
 

somashekar

Staff member
Super Moderator
#5
Hi dbaz..
As I can understand from your detailing, the s/w of your pick and place equipment could be one case to validate.
From the bare PCB panel that is loaded for machine learning, you will complete the machine programming (learning) for each of the PCB in the panel. Having verified and recorded your components reel or stick or tray loading, and having verified and recorded the polarity if any., your inputs are checked. When you run the first panel placements and complete the inspection, and find that the placements are just as needed, and record this, you are validating the machine programming s/w to be meeting your desired requirement.
You may be doing all this. If so, then please call it as the machine learning s/w validation report and make sure you have this for each of the PCBA.
 
D
#6
Yes, we run the first panel where the panel is 100% visually inspected for correct component, polarity placement, presence, soldering defects, etc. Once the first pieces is accepted, production runs that work order and in-process inspections are performed during the run. We do this for all part numbers. Our equipment validation forms are titled Installation & Operational & Performance Qualification and the name of the equipment along with the serial number is recorded under the title. Do I really need to change the title of the form we are currently using for equipment validation or can I just add to the performance part of our report by including machine learning s/w validation for the final approval?
 

yodon

Staff member
Super Moderator
#8
No issue with what's been posted already but I don't think it would be a complete software validation. Software validation has to consider more than just testing. Presuming we're talking about purchased software, there are a number of considerations. Did you install the software correctly (is any infrastructure software at the necessary level per the manufacturer, do you have the latest version with patches applied, are there any known bugs with the software that you need to avoid, ...). As far as I can tell, the only testing you would be doing with what's mentioned above would be "happy path" testing. Will your software properly respond to unexpected inputs or conditions? The "PQ" aspect for software might not be a factor but there could be some considerations (memory leaks if the software runs for extended time, etc.). Finally, do you have a process in place to monitor when the software changes or when the environment in which it runs changes? These could impact the validation. You should also periodically monitor for any new known issues or things like (security) patches.
 
Thread starter Similar threads Forum Replies Date
I No validation for a contract specification and software developer? ISO 13485:2016 - Medical Device Quality Management Systems 5
K Software validation question - Contract Manufacturer - ISO 13485 implementation ISO 13485:2016 - Medical Device Quality Management Systems 2
Y ISO 13485:2015 Software Validation IQ/OQ/PQ ISO 13485:2016 - Medical Device Quality Management Systems 12
R Debug mode in software/device validation IEC 62304 - Medical Device Software Life Cycle Processes 2
M Software verification and validation AS9100 AS9100, IAQG, NADCAP and Aerospace related Standards and Requirements 4
P Software verification and validation procedure IEC 62304 - Medical Device Software Life Cycle Processes 6
H Software Validation for FFS Packaging Machine Qualification and Validation (including 21 CFR Part 11) 1
Q ISO 13485 7.5.6 Validation - Off the shelf Software ISO 13485:2016 - Medical Device Quality Management Systems 3
M ERP / QMS related software standards for Validation IEC 62304 - Medical Device Software Life Cycle Processes 6
D Software validation team Misc. Quality Assurance and Business Systems Related Topics 3
silentmonkey Rationalising the level of effort and depth of software validation based on risk ISO 13485:2016 - Medical Device Quality Management Systems 10
E 13485:2016, Sections 4.1.6, 7.5.6 and 7.6 - Validation of Software - Need some Advice please ISO 13485:2016 - Medical Device Quality Management Systems 3
K Software Validation for Measurement Tools used in Process Validation ISO 13485:2016 - Medical Device Quality Management Systems 2
S SOP for ISO 13485:2016 Quality related Software validation ISO 13485:2016 - Medical Device Quality Management Systems 9
K ERP System Software Validation - ISO13485 2016 4.1.6 Design and Development of Products and Processes 8
D Software validation in Medical Equipment Other Medical Device and Orthopedic Related Topics 20
C Looking for simple Software Validation IQ templates. Qualification and Validation (including 21 CFR Part 11) 4
C Software validation - Off The Shelf Software - Web hosted ISO 13485:2016 - Medical Device Quality Management Systems 6
R Validation of Medical Device Hardware containing Software - How many to Validate ISO 13485:2016 - Medical Device Quality Management Systems 1
F 21 CFR Part 11 - Implicit requirements - Validation plan for a Software as a Service Other US Medical Device Regulations 1
R ISO 13485 Software validation procedure and Quality Objectives Monitoring wanted Document Control Systems, Procedures, Forms and Templates 1
S Validation of COTS Equipment plus Software Qualification and Validation (including 21 CFR Part 11) 12
Pmarszal Software Validation Training Course - Recommendations Training - Internal, External, Online and Distance Learning 3
T Software Validation Certificate (ISO 13485:2016) ISO 13485:2016 - Medical Device Quality Management Systems 19
R FDA Requirements - Printing Equipment Software Validation Qualification and Validation (including 21 CFR Part 11) 1
G Windows 10 OS build Software Validation US Food and Drug Administration (FDA) 1
S Where to keep Enterprise Resource Planning software (ERP) Validation Records ISO 13485:2016 - Medical Device Quality Management Systems 1
C Software validation (4.1.6 ISO 13485:2016) ISO 13485:2016 - Medical Device Quality Management Systems 20
M Software Validation Guidance Suggestions Various Other Specifications, Standards, and related Requirements 6
S QMS software validation - Documentation ISO 13485:2016 - Medical Device Quality Management Systems 5
A SOP for software validation of software in medical device IEC 62304 IEC 62304 - Medical Device Software Life Cycle Processes 5
R CNC Software Validation requirements as per ISO 13485:2016 Other ISO and International Standards and European Regulations 8
R Software validation - off the shelf X-Ray Software Quality Assurance 3
S What is the clause in ISO 13485 for SAP Software Validation? ISO 13485:2016 - Medical Device Quality Management Systems 3
P Software validation of Data Exporter ISO 13485:2016 - Medical Device Quality Management Systems 3
A Process Validation of QMS Software ISO 13485: 2016 Cl. 4.1.6 ISO 13485:2016 - Medical Device Quality Management Systems 26
P Software Validation for Equipment - Question ISO 13485:2016 - Medical Device Quality Management Systems 5
D Medical Device Software Tool Validation - Compilers! IEC 62304 - Medical Device Software Life Cycle Processes 7
N When is Medical Device Software Validation required? ISO 13485:2016 - Medical Device Quality Management Systems 6
O Process Mapping prior to Validation and Software to use to Map Process Maps, Process Mapping and Turtle Diagrams 12
S Software Validation – Clause 4.1.6 of ISO 13485:2016 ISO 13485:2016 - Medical Device Quality Management Systems 12
B Could I combine IQ, OQ and PQ for Minitab Software Validation ? Software Quality Assurance 3
R Document Management Software : Validation and other requirements Medical Information Technology, Medical Software and Health Informatics 8
E Software Validation - Clinical Trials US Food and Drug Administration (FDA) 3
K What are the minimum requirements for Process Validation (Software)? ISO 13485:2016 - Medical Device Quality Management Systems 5
R ISO - Clause 7.5.1.3 - CMM Software Program Validation ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 2
I Validation Software Experience? (Valgenesis, etc.) Quality Assurance and Compliance Software Tools and Solutions 1
M Injection Molding Machine Software Validation Calibration and Metrology Software and Hardware 2
E FDA Requirements for Implantable Medical Device Software Validation ISO 13485:2016 - Medical Device Quality Management Systems 5
C Change Control Forms Post Software Validation Medical Information Technology, Medical Software and Health Informatics 2

Similar threads

Top Bottom